Mar 25, 2024
2 new incidents, 1 with updates.
Started
- ClosedPatched
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody). Added to the CISA KEV catalog on 2024-03-25. CISA lists known use in ransomware campaigns. CVE-2021-44529 was assigned before 2024; the KEV listing came in 2024.
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)Closed Mar 25, 2024
- ClosedPatched
Nice Linear eMerge E3-Series OS Command Injection
Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution. Added to the CISA KEV catalog on 2024-03-25. CVE-2019-7256 was assigned before 2024; the KEV listing came in 2024.
Nice Linear eMerge E3-SeriesClosed Mar 25, 2024
Updated
- ClosedPatched
Fortinet FortiClient EMS SQL Injection
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests. Added to the CISA KEV catalog on 2024-03-25. CISA lists known use in ransomware campaigns. CVE-2023-48788 was assigned before 2024; the KEV listing came in 2024.
Fortinet FortiClient EMSClosed Mar 25, 2024
